ADMIN.FOUNDATION – Page 403 – cybersecurity / defense / intelligence

Multiple VMware Stored XSS Flaw Enable Attackers to Inject Malicious Scripts

·

CVE/vulnerability, cyber security, Cyber Security News, vulnerability

VMware has disclosed multiple high-severity stored cross-site scripting (XSS) vulnerabilities affecting VMware Cloud Foundation (VCF) Operations, potentially allowing attackers to inject malicious scripts and compromise administrative environments. The issues, tracked as CVE-2026-41722, CVE-2026-41723, and CVE-2026-41724, were published under advisory VMSA-2026-0004 on June 8, 2026, and carry a combined CVSS v3 base score of 8.0, indicating […]

The post Multiple VMware Stored XSS Flaw Enable Attackers to Inject Malicious Scripts appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
The Hardest Fork

·

Mythos is real. I know a big chunk of the industry thinks it’s a marketing stunt, and I get why. I get it. But I’ve seen the findings, and they’re bad. These aren’t “whoops, this line right here is wrong, and that’s RCE.” They’re novel combinations of a few dozen issues out of thousands of things every SAST scanner already finds, chained together into something much worse. It’s real creativity,

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Google Fixes 429 Chrome Vulnerabilities, Including 22 Critical Bugs

·

Chrome, CVE/vulnerability, cyber security, Cyber Security News, Google, Vulnerabilities, vulnerability

Google has released Chrome 149 to the stable channel, addressing a significant batch of 429 security vulnerabilities across Windows, macOS, and Linux, including 22 critical flaws that could enable remote code execution, memory corruption, and sandbox escapes. The update, version 149.0.7827.53/54, is being rolled out gradually and includes fixes across multiple components, including ANGLE, GPU, […]

The post Google Fixes 429 Chrome Vulnerabilities, Including 22 Critical Bugs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Instagram Recovery Tool Bug Exposed 20,225 Accounts to Password Reset Abuse

·

Cyber Attack, cybersecurity, Data Breaches, FACEBOOK, Instagram, Maine, Meta, Privacy, Security, Social Media, vulnerability

Meta says an Instagram recovery tool bug allowed attackers to abuse password resets, affecting 20,225 accounts and exposing users without 2FA to account takeover risk.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
OWASP Unveils AI Security Report Highlighting New Tools for Security Teams

·

cyber security, Cyber Security News, OWASP – Top 10

OWASP has released a new edition of its AI security report, “State of Agentic AI Security and Governance v2.01,” giving security teams a concrete playbook for defending autonomous AI agents and the expanding ecosystem of tools they rely on. Positioned within the OWASP GenAI Security Project, the report shifts AI security conversations from hypothetical threat […]

The post OWASP Unveils AI Security Report Highlighting New Tools for Security Teams appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Internet Explorer WebBrowser Control Abuse Lets Attackers Convert Clicks Into RCE

·

cyber security, Cyber Security News, internet, vulnerability

Internet Explorer’s legacy WebBrowser control can be abused to turn seemingly harmless user clicks into full remote code execution (RCE), even on systems that no longer use Internet Explorer as a standalone browser. Although Microsoft officially ended support for IE, the Trident engine and WebBrowser ActiveX control remain embedded in numerous Windows applications built with […]

The post Internet Explorer WebBrowser Control Abuse Lets Attackers Convert Clicks Into RCE appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances

·

A China-nexus cyber espionage group has been observed deploying a BSD variant of a known backdoor called BRICKSTORM, as well as two other malware families codenamed PLENET (aka GRIMBOLT) and AGENTPSD to target Linux systems. The activity has been attributed by Volexity to a threat cluster it tracks as VerdantBamboo, which it said overlaps with hacking groups known as Clay Typhoon (Microsoft),

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Instagram Glitch Reportedly Exposed Contact Info of Zuckerberg and Other Users

·

cybersecurity, FACEBOOK, Glitch, Instagram, Mark Zuckerberg, Meta, Privacy, Security, Social Media, vulnerability

Instagram glitch exposed Mark Zuckerberg’s email addresses and phone number, plus contact details of other top users, through a password reset flaw.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
China-Linked OP-512 Targets IIS Servers With Unique Web Shell Framework

·

cyber security, Cyber Security News, IIS

A suspected China-linked espionage cluster dubbed OP-512 after rapidly correlating many low-fidelity events into a single high-priority incident that human analysts then validated. OP-512 compromised an Internet Information Services (IIS) server and deployed a custom web shell framework built to evade signature-based detection. Each web shell instance is cryptographically unique, restricts access with layered encryption, […]

The post China-Linked OP-512 Targets IIS Servers With Unique Web Shell Framework appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Lucid Stealer Hits 18 Browsers, Crypto Wallets, and Discord Tokens

·

cyber security, Cyber Security News

A new, fully featured Lucid Stealer build that combines large-scale credential theft with hidden remote access. The sample, distributed through Telegram-linked underground channels, is not a simple packed executable but a Lucid-branded information stealer and RAT wrapped inside a legitimate Node.js Single Executable Application (SEA). Static analysis recovered an embedded JavaScript loader and decrypted core […]

The post Lucid Stealer Hits 18 Browsers, Crypto Wallets, and Discord Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶